FBI CJIS Security Policy
AC: Access Control – FBI CJIS Security Policy

FBI CJIS Security Policy AC-2(3): Account Management | Disable Accounts

What does AC-2(3) require?

Disable within one week accounts that have expired, are no longer tied to a user, violate organizational policy or have been inactive for 90 calendar days.

Maintained by Gerard BlokdykControl text last updated

Other controls in AC: Access Control – FBI CJIS Security Policy

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll FBI CJIS Security Policy controls